CVE-2007-1860

EPSS 24.5%

libapache-mod-jk

發布日:2007/5/25修改日:2026/3/9

也稱為:DSA-1312-1DEBIAN-CVE-2007-1860

描述

mod_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. (dot dot) sequences and directory traversal, a related issue to CVE-2007-0450.

受影響套件(2)

Debian/libapache-mod-jkfrom 0, < 1:1.2.23-1
Debian/libapache-mod-jkfrom 0, < 1:1.2.18-3etch1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2007-1860